Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4BBCC01C811F186AA9D87DAE4EC9C.roa
File: 6CE4BBCC01C811F186AA9D87DAE4EC9C.roa (raw, json)
Hash identifier: WzilQcGqZZE0qeTSaiyEwGEhGPnr+1PR4A7dghq/xt8=
Subject key identifier: 6C:9E:EA:27:12:83:32:EA:1E:D4:93:34:14:67:14:C9:F9:AE:CB:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B893
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4BBCC01C811F186AA9D87DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 12:52:56 +0000
ROA not before: Wed 04 Feb 2026 12:52:51 +0000
ROA not after: Sun 08 Mar 2026 12:52:51 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112787 (0x1b893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 12:52:51 2026 GMT
Not After : Mar 8 12:52:51 2026 GMT
Subject: CN=69834128-3a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:76:ff:ef:c6:7a:6d:07:f8:3a:5d:28:40:
a0:c6:e5:d1:f8:81:51:f9:8d:8e:78:f3:25:e3:fe:
8c:cb:64:82:54:f6:47:a1:85:54:28:bd:51:f2:2b:
14:19:42:71:d9:9b:68:b3:23:38:5d:9f:a2:69:65:
9e:aa:8a:b2:be:5d:2d:c9:2a:e1:bb:c0:27:d1:0c:
bd:48:e4:4a:c1:9a:be:05:f7:65:d2:39:8d:f8:79:
41:46:e9:f1:d7:7e:b0:75:24:b0:0f:fd:74:8d:19:
20:6c:21:54:bc:de:01:40:04:46:01:d2:17:c5:01:
06:20:57:25:57:92:34:ef:74:cd:86:e7:86:1f:56:
71:40:92:2b:45:de:6d:f6:05:a5:98:67:d1:1a:cb:
e4:1c:f8:27:d5:ba:71:83:7c:80:aa:93:79:c5:09:
e1:a6:4e:8b:8c:ca:09:12:eb:a5:f5:59:d8:7f:af:
e2:03:cc:a7:05:75:6c:08:49:c5:bf:46:6c:c4:af:
93:8d:3e:b2:69:b3:c3:45:82:40:e2:6b:2b:9d:0a:
f4:25:e5:3c:80:e3:6b:ff:d0:a5:67:64:0b:5e:df:
03:e4:59:62:c2:6e:fd:d9:ac:19:83:09:dd:c0:ed:
57:14:4b:c0:ef:8f:d3:09:d7:6e:a2:06:98:14:f5:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:EA:27:12:83:32:EA:1E:D4:93:34:14:67:14:C9:F9:AE:CB:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4BBCC01C811F186AA9D87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.124.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:e6:c2:2a:d0:e1:3c:48:da:b3:17:4d:ca:fe:d0:e2:56:
60:fc:81:e1:1a:e3:3b:81:d3:18:9d:1a:d1:e3:40:e6:96:52:
23:0c:fe:04:67:4e:cd:c1:76:c0:0f:5d:70:eb:1c:a7:7b:b1:
1f:25:04:19:27:4e:72:20:7f:59:a1:36:83:26:2d:40:eb:8a:
80:6f:fd:e3:eb:25:6d:28:f0:b6:77:8b:84:5e:e4:fe:2d:2f:
07:0b:94:22:81:3d:63:4d:a3:3b:0c:dd:64:46:49:48:a2:9e:
34:05:82:95:0b:86:e7:96:37:a0:81:32:75:a3:56:8d:82:15:
af:0a:93:ca:dc:a0:c4:9a:08:c9:ca:bd:d6:9c:21:f5:7b:3a:
3c:2f:ed:3f:5e:9e:91:f9:6f:d3:94:41:06:00:f6:8a:cd:b0:
f4:3e:91:53:c1:b4:37:c0:fc:37:d7:44:a6:a2:2d:75:92:7d:
90:c6:dc:e6:96:36:ef:d9:5b:b2:3a:c9:6a:7b:26:e1:54:06:
8f:12:f2:36:3c:ad:4c:61:f9:a1:10:d7:0a:4e:fe:ed:95:79:
ad:7c:9f:82:4d:e4:4e:32:0b:66:6d:c9:8d:35:7d:30:ff:67:
51:41:02:11:ad:cb:53:e9:fc:20:45:47:13:2c:1d:0b:18:b4:
c0:06:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:20 2026 by rpki-client